0b6c3923a7d34f3062dab70853887a2a3c8bdb009e9a110d4a554bef892b26fd

Sharing

Copy URL Twitter E-mail

General

Target
0b6c3923a7d34f3062dab70853887a2a3c8bdb009e9a110d4a554bef892b26fd
Size 847KB
Sample220405-gw2d8aadb3
SHA256 0b6c3923a7d34f3062dab70853887a2a3c8bdb009e9a110d4a554bef892b26fd
MD5 a1c859cfd007efe187b13cc8d31a6e6c
SHA1 e7f70d2c4b989efb506cb2d52f899d0f0d2a1300
SHA512 3e7df4fab352ce7d7897396eae764e90517a69b3ca18ebee4547ea054a9dd8b5852f60795d8b05819b585a78aa6afc31358f4ddea3f3a59f809fc682e9503522
SSDEEP 24576:KssfHfmwaZ5tpHNeg5FUc8bRLcPpCFnwRSF/:K9/fmwg5TjQRLKp/c
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0b6c3923a7d34f3062dab70853887a2a3c8bdb009e9a110d4a554bef892b26fd

.exe 847KB

0b6c3923a7d34f3062dab70853887a2a3c8bdb009e9a110d4a554bef892b26fd

IMPHASH 96eae08baffc1f2bb2ff78914719ff7f
SHA256 0b6c3923a7d34f3062dab70853887a2a3c8bdb009e9a110d4a554bef892b26fd
MD5 a1c859cfd007efe187b13cc8d31a6e6c
SHA1 e7f70d2c4b989efb506cb2d52f899d0f0d2a1300
SHA512 3e7df4fab352ce7d7897396eae764e90517a69b3ca18ebee4547ea054a9dd8b5852f60795d8b05819b585a78aa6afc31358f4ddea3f3a59f809fc682e9503522
SSDEEP 24576:KssfHfmwaZ5tpHNeg5FUc8bRLcPpCFnwRSF/:K9/fmwg5TjQRLKp/c
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19691

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA LocalFlags GetConsoleAliasesA GlobalAlloc LoadLibraryW InterlockedPopEntrySList LeaveCriticalSection WriteConsoleW lstrlenW GetShortPathNameA CreateDirectoryA GetCPInfoExW FillConsoleOutputCharacterW SetLastError GetLongPathNameA SetMailslotInfo WriteProfileSectionA SetStdHandle LoadLibraryA MoveFileA SetProcessWorkingSetSize GetModuleFileNameA FindFirstChangeNotificationA GetConsoleTitleW VirtualProtect SetCalendarInfoA CloseHandle HeapSize WriteConsoleOutputCharacterA SetConsoleTextAttribute GetConsoleAliasesLengthW UnregisterWait SetFilePointer FlushFileBuffers GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EnterCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep WideCharToMultiByte RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode CreateFileW

user32

ClientToScreen

gdi32

GetTextExtentExPointA

advapi32

ClearEventLogW

ole32

CoFileTimeNow

Name

.text

Size

695KB

Virtual Size

695KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

289KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yevu

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cewico

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bafabu

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vic

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ